So it's okay to have a fingerprint reader as long as you claim to do something to the effect of hashing the fingerprint?